Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c27c5e40-fe20-4bc1-90d4-97d3b12a5ecb.roa
File: c27c5e40-fe20-4bc1-90d4-97d3b12a5ecb.roa (raw, json)
Hash identifier: eXJUQtRW4zZKinzyyTe8W63rHb/g6//HozeMNiAV+04=
Subject key identifier: AE:1A:54:87:63:12:A7:C3:D9:5D:70:E1:EF:6E:ED:99:E3:BE:52:D8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 55AE6AA9080B90E001C19B7FA0DFE55C17EBD74E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c27c5e40-fe20-4bc1-90d4-97d3b12a5ecb.roa
Signing time: Fri 13 Feb 2026 15:20:06 +0000
ROA not before: Fri 13 Feb 2026 15:20:06 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:5080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:ae:6a:a9:08:0b:90:e0:01:c1:9b:7f:a0:df:e5:5c:17:eb:d7:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 13 15:20:06 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=994c18044621fe893bef264811129f1282a7f45010fc30244fd773b9b6275216, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:50:65:a1:b5:07:cc:fb:17:cc:c0:99:4a:21:
89:be:14:9d:3b:33:64:9d:e3:c4:6c:67:03:e4:34:
9b:82:4c:99:1b:57:e5:d8:99:e6:79:82:85:0e:6f:
73:50:84:bc:9b:c5:bd:08:e2:63:2e:f2:36:c5:3d:
c8:8b:81:8f:32:d2:de:bc:00:ac:9c:78:f8:63:42:
5a:e9:dd:5f:8e:dc:18:34:fc:82:8b:e3:8d:c8:f2:
7d:1b:71:b9:b4:a2:cf:f9:a6:66:4c:bb:8d:57:37:
83:40:84:57:ec:3a:54:5e:ed:ba:60:3c:62:8f:e2:
83:19:a8:12:bd:9c:19:fa:e8:5e:6e:03:cf:47:21:
26:03:15:79:0f:af:06:3b:d6:6f:c1:e0:df:47:55:
5c:8c:0d:93:13:71:fd:cb:38:8d:2e:54:75:ff:6a:
b3:e2:f6:2a:ac:08:06:b1:dd:c5:5e:33:44:8e:10:
27:d0:01:c7:5d:8c:c2:c2:2a:08:af:42:1f:5c:c4:
3d:ae:f1:18:46:70:ea:ea:0a:a9:bb:8b:21:62:a3:
c3:f5:09:94:6e:78:fe:54:db:b7:6f:8f:b6:55:d8:
64:87:c5:cc:b1:e7:a2:80:67:a3:44:8a:b3:59:87:
f3:21:af:70:41:1c:10:02:3f:15:4b:5a:93:bb:a3:
7e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:1A:54:87:63:12:A7:C3:D9:5D:70:E1:EF:6E:ED:99:E3:BE:52:D8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c27c5e40-fe20-4bc1-90d4-97d3b12a5ecb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:5080::/46
Signature Algorithm: sha256WithRSAEncryption
b4:9e:23:9d:0c:b0:de:32:10:ca:c6:7a:28:46:ef:cc:01:3b:
89:8f:1e:ef:06:85:f1:05:91:e2:26:b2:b7:34:ef:4e:4e:87:
af:22:f0:ff:41:d2:c8:66:64:8a:89:bd:87:b7:f4:23:40:cb:
ca:ef:ce:0d:79:76:07:14:5b:73:74:18:72:60:2b:11:3f:29:
7c:ce:71:81:0b:79:92:5b:71:a0:86:40:fb:3a:8d:b0:b3:d4:
7e:e6:ed:73:a6:dd:23:df:32:67:47:6d:82:b3:8c:98:2b:06:
44:47:c5:0e:b4:4c:9c:8d:e5:57:35:cb:d3:37:ae:97:6a:21:
99:4f:e0:ec:5f:3d:2b:05:4b:e5:01:9a:cb:83:87:aa:64:c8:
19:27:e8:c0:f1:67:48:ab:a4:55:c5:be:17:ff:56:10:3d:32:
2a:e3:1b:cf:79:26:4f:74:f2:85:59:61:6d:1f:76:01:4b:b1:
2d:03:94:f7:43:5a:23:6b:0c:86:2e:e8:76:5c:ed:4f:2b:82:
05:73:29:86:41:5c:9f:eb:b2:14:03:60:f7:0b:ce:b3:6b:c7:
99:4d:f0:71:ac:16:3e:6f:1a:83:a1:53:13:32:54:89:d0:14:
65:d0:9e:3a:0f:89:ea:fd:d7:53:3d:34:4f:e3:88:39:da:d6:
68:7f:0c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:49:21 2026 by rpki-client